Thanks for the info...
I am looking into it, but ext4 can wait for now...
___________________________________________________

Updates for restricted user 'Spot' in Akita

Testers more than welcome, can stop me shooting in the dark!

I have decided that I want the browser and media player(s) to run reliably as 'Spot'.

It is very much a work in progress, here is the progress:

- Spot can run terminals, browsers, vlc, mocp, alsamixer, geany, rox, etc
- Spot cannot mount drives (this is what I want!)
- Spot has the home folder /root/Spot
- Spot cannot make changes in /usr/bin,/usr/sbin, etc
- Easily run any programs as Spot, from the menu
- Easily run as Spot from terminal, command: run_as_spot

Thanks for the info...
I am looking into it, but ext4 can wait for now...

OK, then.

sc0ttman wrote:

- sudo does not work, always reports '3 wrong passwords' or whatever
...
- PLEASE HELP ME GET SUDO WORKING!
- to see what I mean, run `run_as_spot PupApps`

I can only add 2 cents worth as I am not using 'Akita'. When I downloaded your pet and ran run_as_spot on the command line the su command demanded a password. I thought spot didnt have one or would accept "spot" as a password but it didnt. I ended up deleting the password with "passwd -d spot" . After that, "./run_as_spot 'ps -ef ' and "./run_as_spot bash" then worked fine, ps -ef also indicated that these processes were being run under user spot. That is as far as I tested it.

As far as copying to spot's home directory in my experience a lot of config files work read only so you could symlink a lot of them rather than copy.

sudo, as opposed to su does not work on my system (no sudoers file - it all seems rather complicated to work out as well). I would have thought it would be quite simple to write a very short daemon that could read from a named pipe and execute commands from it, so for example echo -e "mount <parameters etc> \n" >/var/named_pipe could work from spot or better still just read the pipe, prepend "mount " to the line so only mount commands could be executed by the daemon.

As far as copying to spot's home directory in my experience a lot of config files work read only so you could symlink a lot of them rather than copy.

I will have a play with that, and if secure, might symlink various things into the /root/spot dir..

And just to note, on Akita, I could run bash as spot without any problems,
without changing the passwords of any users...

Quote:

I would have thought it would be quite simple to write a very short daemon that could read from a named pipe and execute commands from it, so for example echo -e "mount &lt;parameters etc> \n" >/var/named_pipe could work from spot or better still just read the pipe...

Have to get my head round this a bit, I'm sure it's simple enough, but would prefer to get sudo working in Akita, the same as 'fido' works in Racy, Slacko, etc... Mainly because lots of apps already have 'that sudo line' in there to run 'askpass', if root privileges are required...

EDIT: now past Sudo error mentioned in my previous post...
...moving onto a whole new set of sudo errors!

I can get past the '3 wrong passwords entered' error by running:

Code:

echo spot: | chpasswd

But then, in any script which contains the root login requirement snippet (which runs /usr/sbin/askpass):

i ran across one of your posts on the forum, asking for a perl package in puppy that wasn't broken.
I myself had thought perl in puppy was broken, that is until 4 weeks ago when i discovered that it isn't.
Although puppy's perl is minimal, it's very easy to update and install missing stuff using CPAN, which is in the puppy devx.

type cpan into a console and see......

anyway, using this new found knowledge, i've got 'get_iplayer' working on akita (being in the uk you'll probably appreciate it )

search isn't working, as it requires the terminal to be held open with '-hold' and akita's rxvt doesn't understand this.

First, just to say I won't be on here much for a while... but wanted to say thanks for the iplayer thing!

I've been away from here because I had a burst appendix on monday, 2 weeks ago, which I realised too late (thur).. thought it was just a bad stomach ache... couldnt eat a thing for about 12 days straight, so i'm skinny as hell, but now out of hospital eating like a horse and loving it... early days yet, wound has to be left open due to infection, still need antibiotics, etc, etc - so I will be at home at lot for the next 3 weeks, nurses coming out each day... not hot ones either..
...................

Quote:

i've got 'get_iplayer' working on akita (being in the uk you'll probably appreciate it )

Thanks for this!! Great timing for me!!

666philb wrote:

Although puppy's perl is minimal, it's very easy to update and install missing stuff using CPAN, which is in the puppy devx.

It's on my to do list t o update PERL in akita to 5.10, basically stealing from a recent Wary... Hope that'll work... I will have to make sure it all matches up with Akitas latest devx, which is 99% wary 5.1.4..

Quote:

search isn't working, as it requires the terminal to be held open with '-hold' and akita's rxvt doesn't understand this.

mrxvt should have the -hold option... It's listed.. Hmmm... by chance, I got urxvt installed at the mo, working fine..
_______________________

Am testing it all now, with urxvt and PERL 5.8 in main SFS, and PERL 5.10 in devx (I know, this needs fixing, on my list, as I said)...

Have downloaded the latest 'Apprentice', worked perfect, waiting for my gf to get in so we can watch it together... THANKS, much appreciated at the moment, as I say...
_____________________

Hope you're doing better, sc0ttman. Time, as they say, heals all things... I hope you are not an exception to this

As I type this, I'm installing Puplite 5 on my 2nd thin client... really a nice piece of work, that Puplite. Someday I'll figure out how you manage to make it so small and still include everything but the kitchen sink, but until then it will remain a mystery to me.

For now, as one would command a sick Puppy: HEAL!

...actually, on that note... a friend of mine has what he and I call the "oxygen principle": when you board an airplane and they give you those boring yet important safety instructions, they mention one thing that sounds counterintuitive: if traveling with a child (or children) always put the oxygen mask on yourself first, then the kid(s). The moral: take care of yourself, first -- if you don't, you can't really take care of anyone else.

Hello, I'm doing alright, thanks everyone... had to go back to hospital the other day, had a bad 24 hours, but still generally on the mend... got another 2 weeks off work at least tho, still taking it easy... Had some time on my hands, so....
________________________

Akita is binary compatible with Wary 5.1.x, using the Wary5OLD repo.
Akita also has its own repo. Packages from dpup should mostly be OK too..

But remember, Akita Linux is (for now) still using sfs3,
with kernel 2.6.25.16, just like puppy 4.1, 4.2 and 4.2.1.

But it is really up to date in many ways...
If you haven't tried Akita, give it a go, you might like it!

Summary of changes in Beta 8:

- many fixes and updates 'under the hood'
- updated to latest scripts in Woof2, over 50 updated scripts
- very latest PupControl, PupApps, Firstrun, PupSaveConfig, sfs_load, pburn, etc
- many fixes, updates and tools to make user 'spot' work correctly/easily
- many new apps and fixed pkgs in Akita repo and PPM
- many more ROX right click options
- many other fixes and small updates

March 13
- updated file permissions for many files/dirs in /dev, /tmp, /usr/bin, /usr/sbin
- added another tty to system.. see /etc/inittab
- small fixes for 'spot', in browser-installer and pup-advert-blocker
- updated 'Run as Spot' GUI to 0.2, small fixes, faster
- more akita help files in ~/my-documents
- updated freeciv-2.3.1-akita in PPM: fixed permissions of spot folder and its contents

You cannot post new topics in this forumYou cannot reply to topics in this forumYou cannot edit your posts in this forumYou cannot delete your posts in this forumYou cannot vote in polls in this forumYou cannot attach files in this forumYou can download files in this forum